From c811749c328cc7b795b146377a64d89f68f1eddc Mon Sep 17 00:00:00 2001 From: Gabriele Fedi Date: Fri, 14 Nov 2025 16:54:50 +0100 Subject: [PATCH] docs: default azure credentials Signed-off-by: Gabriele Fedi --- web/docs/object_stores.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/web/docs/object_stores.md b/web/docs/object_stores.md index f1714c9..ed5d203 100644 --- a/web/docs/object_stores.md +++ b/web/docs/object_stores.md @@ -233,6 +233,7 @@ Barman Cloud supports the following authentication methods: - Storage Account Name + [Access Key](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage) - Storage Account Name + [SAS Token](https://learn.microsoft.com/en-us/azure/storage/blobs/sas-service-create) - [Azure AD Workload Identity](https://azure.github.io/azure-workload-identity/docs/introduction.html) +- [Azure Default Credentials](https://learn.microsoft.com/en-us/azure/developer/go/sdk/authentication/credential-chains#defaultazurecredential-overview) ### Azure AD Workload Identity @@ -252,6 +253,26 @@ spec: [...] ``` +### Azure Default Credentials + +To authenticate using Azure Default Credentials, set the annotation +`barmancloud.cnpg.io/useDefaultAzureCredentials="true"` on the ObjectStore: + +```yaml +apiVersion: barmancloud.cnpg.io/v1 +kind: ObjectStore +metadata: + name: azure-store + annotations: + barmancloud.cnpg.io/useDefaultAzureCredentials: "true" +spec: + configuration: + destinationPath: "" + azureCredentials: + inheritFromAzureAD: true + [...] +``` + ### Access Key, SAS Token, or Connection String Store credentials in a Kubernetes secret: